--- title: "Philips e-Alert Unit (non-medical device) vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/philips/e-alert-unit-non-medical-device type: product description: "Philips e-Alert Unit (non-medical device) has 9 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2018-09-26 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Philips e-Alert Unit (non-medical device) vulnerabilities Vendor: [Philips](https://radicalnotion.ai/vendor/philips) - **Published CVEs:** 9 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 0 - **Average CVSS:** 8.0 - **First CVE:** 2018-09-26 - **Latest CVE:** 2018-09-26 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 2 | | High | 5 | | Medium | 2 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 1 | | [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 1 | | [CWE-276](https://radicalnotion.ai/cwe/cwe-276) | Incorrect Default Permissions | 1 | | [CWE-319](https://radicalnotion.ai/cwe/cwe-319) | Cleartext Transmission of Sensitive Information | 1 | | [CWE-352](https://radicalnotion.ai/cwe/cwe-352) | Cross-Site Request Forgery (CSRF) | 1 | | [CWE-384](https://radicalnotion.ai/cwe/cwe-384) | Session Fixation | 1 | | [CWE-400](https://radicalnotion.ai/cwe/cwe-400) | Uncontrolled Resource Consumption | 1 | | [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2018 | 9 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | \>= R2.1 and prior | range | 9 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2018-8856 | - | critical | 9.8 | No | No | No | | CVE-2018-8854 | - | high | 7.5 | No | No | No | | CVE-2018-8852 | - | high | 8.8 | No | No | No | | CVE-2018-8850 | - | critical | 9.8 | No | No | No | | CVE-2018-8848 | - | high | 7.5 | No | No | No | | CVE-2018-8846 | - | medium | 6.1 | No | No | No | | CVE-2018-8844 | - | high | 8.8 | No | No | No | | CVE-2018-8842 | - | high | 8.8 | No | No | No | | CVE-2018-14803 | - | medium | 5.3 | No | No | No | ## Frequently asked questions ### How many CVEs does Philips e-Alert Unit (non-medical device) have? Philips e-Alert Unit (non-medical device) has 9 published CVE records since 2018. ### How many Philips e-Alert Unit (non-medical device) CVEs are in CISA KEV? None of Philips e-Alert Unit (non-medical device)'s CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Philips e-Alert Unit (non-medical device) vulnerabilities? No Philips e-Alert Unit (non-medical device) CVEs currently have a tracked public exploit in this dataset. ### Which versions of Philips e-Alert Unit (non-medical device) are affected? 1 distinct Philips e-Alert Unit (non-medical device) version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Philips e-Alert Unit (non-medical device) CVEs? Philips e-Alert Unit (non-medical device)'s CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-276 (Incorrect Default Permissions), CWE-319 (Cleartext Transmission of Sensitive Information). ### How many critical Philips e-Alert Unit (non-medical device) vulnerabilities are there? Philips e-Alert Unit (non-medical device) has 2 critical and 5 high-severity CVEs. ### What is the average severity of Philips e-Alert Unit (non-medical device) CVEs? The average CVSS base score across Philips e-Alert Unit (non-medical device)'s scored CVEs is 8.0. ## Other products from this vendor - [IntelliSpace Portal](https://radicalnotion.ai/vendor/philips/intellispace-portal) (14 CVEs) - [patient information center ix](https://radicalnotion.ai/vendor/philips/patient-information-center-ix) (11 CVEs) - [e-alert firmware](https://radicalnotion.ai/vendor/philips/e-alert-firmware) (10 CVEs) - [hue bridge v2](https://radicalnotion.ai/vendor/philips/hue-bridge-v2) (9 CVEs) - [hue bridge v2 firmware](https://radicalnotion.ai/vendor/philips/hue-bridge-v2-firmware) (9 CVEs) - [Philips IntelliSpace Portal](https://radicalnotion.ai/vendor/philips/philips-intellispace-portal) (9 CVEs) - [Vue PACS](https://radicalnotion.ai/vendor/philips/vue-pacs) (9 CVEs) - [Clinical Collaboration Platform](https://radicalnotion.ai/vendor/philips/clinical-collaboration-platform) (8 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/philips/e-alert-unit-non-medical-device). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.